Open Stack

Duncan, Attila,
    Thanks for your response.

We found a issue when using os_priviledge_user_name which is when we sent
this patch
https://review.openstack.org/#/c/156940/

Post that we used admin user, its password and admin tenant in cinder.conf
to make it work
But we thought that using admin creds (esp password) isn't secure in
cinder.conf so we thought of
patching tempest test case, but later while talking with Attila on IRC,
figured  that we can use
user 'nova' which is added to admin role in lib/nova as part of devstack
setup

So we plan to test using nova creds.

thanx,
deepak

On Mon, Mar 2, 2015 at 5:24 PM, Duncan Thomas <duncan.thomas at gmail.com>
wrote:

> I'm assuming your mean the following lines in nova policy.js:
> "compute_extension:os-assisted-volume-snapshots:create":"rule:admin_api",
> "compute_extension:os-assisted-volume-snapshots:delete":"rule:admin_api"
>
> These 2 calls are not intended to be made directly via an end user, but
> via cinder, as a privileged user.
>
> Please do not patch tempest, since this is a real bug it is highlighting.
> The fix is to get cinder to use a privileged user account to make this
> call. Please raise a cinder bug.
>
> Thanks
>
>
>
>
>
>  Hi,
>
> As part of tempest job " gate-tempest-dsvm-full-glusterfs
> <http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/>"
> run [1], the test case " test_snapshot_create_with_volume_in_use" [2] is
> failing.
> This is because demo user is unable to create online snapshots, due to
> nova policy rules[3].
>
> To avoid this issue we can modify test case, to make "demo" user as an
> admin before creating snapshot and reverting after it finishes.
>
> Another approach is to use privileged user (
> https://review.openstack.org/#/c/156940/) to create online snapshot.
>
> [1]
> http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/
> [2]
> https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66
> [3]
> https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329
>
> --
> Warm Regards,
> Bharat Kumar Kobagana
> Software Engineer
> OpenStack Storage – RedHat India
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150302/c71f2ab0/attachment.html>